Medium severity6.5OSV Advisory· Published Sep 29, 2018· Updated Jun 17, 2026
CVE-2018-17780
CVE-2018-17780
Description
Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: v0.10.1, v0.10.14, v0.10.15, …
- Range: = 1.3.14
Patches
Vulnerability mechanics
References
2- www.inputzero.io/2018/09/bug-bounty-telegram-cve-2018-17780.htmlnvdExploitThird Party Advisory
- www.securityfocus.com/bid/105521nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.